@fastify/forwarded is a Fastify-focused utility that parses the HTTP X-Forwarded-For header. It returns an array of IP addresses from the request, including the socket address, with index 0 as the socket address and the last entry as the furthest address (typically the end-user).
Project status
- Actively maintained and recently updated, with the latest upstream push on 2026-10-21 and a new update v3.1.2 on 2026-10-21 (metadata-only changes per the summary).
- Apparent update cadence is fairly brisk, with v3.1.2 following v3.1.1 by about 11 days, and v3.1.0 and v3.1.1 both released on 2026-10-10 (suggesting rapid iteration and a revert cycle). A larger gap exists before that, from 2026-07-28 (v3.0.2) to 2026-10-10.
AI summary generated
Recent updates
v3.1.2
Release v3.1.2 updates the package metadata in package.json. The release notes only mention removing the npm 'files' field, but the diff shows additional package.json metadata changes as well.
v3.1.1
v3.1.1 is described as a revert of “Add support for unix domain sockets”. The code and documentation changes indicate the unix domain socket handling logic was altered, but the actual return behavior for missing `remoteAddress` changed in a way that is likely to affect consumers.
Breakingv3.1.0
v3.1.0 adds support for unix domain sockets and updates CI/release automation. The core code change adjusts how forwarded addresses are constructed when the socket remote address is missing (common for unix domain sockets), and new tests cover these cases.
Featuresv3.0.2
v3.0.2 is a security-focused release (GHSA-2849-m2w7-xm8f) with primarily CI and dependency maintenance changes. It also includes a runtime parsing behavior tweak for X-Forwarded-For handling of optional whitespace (tabs) plus a TypeScript type-test runner migration from tsd to tstyche.
Securityv3.0.1
v3.0.1 contains only tooling, CI, documentation, and type-definition formatting changes, plus some test runner migration work. There are no runtime/library logic changes visible in the provided diff.
v3.0.0
v3.0.0 focuses on development and CI updates, including multiple devDependency bumps (notably tsd and @types/node), and repository hygiene changes in .gitignore. It also updates the CI workflow to run on additional branch patterns and changes test runner configuration via .taprc. No runtime/API code changes are present in the provided diff.
v2.2.0
v2.2.0 is a tooling-focused release that adds CI license checking, updates the tsd dev dependency, and removes the package.json `engines` field. The diff also includes TypeScript typing changes intended for NodeNext/module compatibility.
Breakingv2.1.0
v2.1.0 updates @fastify/forwarded with improved implementation and CI/dev tooling. The release notes mention documentation and general performance improvements, but the code diff shows additional changes including new TypeScript types, updated module export shape for ESM interop, and a behavior change in how invalid X-Forwarded-For header values are handled.
BreakingFeaturesv2.0.0
This v2.0.0 release contains mainly CI and development workflow updates, plus a series of GitHub Actions dependency bumps. No runtime API, functionality, or behavior changes are described in the release notes.